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-- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)S Responsive to communication(s) filed on 28 June 2005 . 
2a)D This action is FINAL. 2b)M This action is non-final. 

3) Q Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) D Claim(s) is/are pending in the application. 

4a) Of the above claim(s) __ is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) KI Claim(s) 1-24 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) 13 The drawing(s) filed on 07 December 2000 is/are: a)^ accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 1 1 9 

1 2) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C, § 1 1 9(a)-(d) or (f). 
a)D All b)\J Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1) □ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-413) 

2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) Paper No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 5 ) d Notice of Informal Patent Application (PTO-152) 

Paper No(s)/Mail Date , 6) □ Other: . 



U.S. Patent and Trademark Office 
PTOL-326 (Rev. 1-04) 



Office Action Summary 



Part of Paper No./Mail Date 2005071 1 



Application/Control Number: 09/731 ,623 Page 2 

Art Unit: 2131 

DETAILED ACTION 



Priority 

1 . No claim for priority has been made in this application. 

The effective filing date for the subject matter defined in the pending claims in 
this application is 12/07/2000. 

Claim Rejections - 35 (JSC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

2. Claim 1 - 24 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Savill (Where can I find a Unix su like utility?) and in view of Wu (U.S. Patent Number 
5,774,551 ), hereinafter referred to as Wu. 

As per claims 1, 9 and 17, Savill discloses an authentication method, product and 
system comprising: 

generating a first security context in response to a first user authentication (Savill: 
Page 1 Line 2: the low privileged account is interpreted as the 1 st security context), 
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generating a second security context in response to a second user authentication 
(Savill: Page 1 Line 3: the higher privileged account related to system administrative 
work is interpreted as the 2 nd security context); 

However, Savil does not disclose expressly said second security context 
aggregates said first security context and a security context corresponding to an identity 
in said second user authentication. 

Wu teaches said second security context aggregates said first security context 
and a security context corresponding to an identity in said second user authentication 
(Wu: Column 6 Line 65 Column 7 Line 1: stacking multiple authentication services as 
taught by Wu is interpreted as aggregating first security context into the second security 
context). 

It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Wu within the system of Savil because 
(a) Savil discloses the needs of multiple login due to different type of works associated 
with the same personnel, and (b) Wu teaches providing a simplified login embodiment 
using automatic multi-login (i.e. unified logon) so that the same personnel need not 
manually login multiple times for different types of works, which is substantially 
improves in the ease of use of otherwise complex computer security systems (Wu: 
Column 3 Line 56 - 57 and Column 4 Line 25 - 28). 
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As per claims 2, 10, and 18 ( Savil as modified teaches the claimed invention as 
described above (see claim 1, 9 and 17, respectively). Wu further teaches: saving said 
first security context (Wu: Column 3 Line 56 - 57). 

As per claims 3, 11, and 19, Savil as modified teaches the claimed invention as 
described above (see claim 2, 10 and 18, respectively). Wu further teaches: saving 
said first security context comprises the step of pushing said first security context on a 
stack (Wu: Column 6 Line 64 - 67 and Column 7 Line 1 - 4). 

As per claims 4, 12, and 20, Savil as modified teaches the claimed invention as 
described above (see claim 1 , 9 and 17, respectively). Savil further teaches: receiving a 
user logoff (Savil: Page 1 Line 4). 

As per claims 5, 13, and 21, Savil as modified teaches the claimed invention as 
described above (see claim 4, 12 and 20, respectively). Wu further teaches: destroying 
said second security context in response to said step of receiving said user logoff (Wu: 
Column 19 Line 60 -64). 

As per claims 6, 14 and 22, Savil as modified teaches the claimed invention as 
described above (see claim 2, 10 and 18, respectively). Savill teaches reverting to said 
first security context in response to a user logoff (Savill: Line 1 - 5: Savil teaches 
allowing the user to just temporarily start the higher privileged account related to system 
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administrative work so that the user can avoid closing all open application at logoff - i.e. 
Examiner notes the low privileged account is still active upon the logoff of temporary 
higher privileged account related to system administrative work, which is also widely 
used in the field in UNIX systems). 

As per claims 7, 15 and 23, Savil as modified teaches the claimed invention as 
described above (see claim 6, 14 and 22, respectively). Savill as modified further 
teaches reverting to said first security context comprises the step of popping said first 
security context off of a stack (Savill: Page 1 Line 4; Wu: Column 6 Line 65). 

As per claims 8, 16, and 24, Savil as modified teaches the claimed invention as 
described above (see claim 1 , 9 and 1 7, respectively). Wu further teaches: determining 
an access permission in response to said second security context (Wu: Column 3 Line 
11-14 and Column 6 Line 17-22. TABLE 1, Column 17 Line 40-44, Column 10 Line 
33 - 35 and Column 19, Line 54 - 56). 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Longbit Chai whose telephone number is 703-305-0710. 
The examiner can normally be reached on Monday-Friday 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R Sheikh can be reached on 703-305-9648. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-21 7-91 97 (toll-free). 




Longbit Chai 
Examiner 
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